DNS域名解析

一．实验工作原理

1.关闭防火墙

2.关闭seLinux机制

3.挂载光盘

4.构建yum仓库

5.安装bind,bind-utils,bind-libs,bind-chroot

6.主域名服务器配置

   1)全局配置

   2)建立正向解析域

   3)建立反向解析域

7.建立正向区域文件

8.建立反向区域文件

9.启动从域名服务器

10.DNS服务器测试

二．操作步骤

service iptables stop

chkconfig iptables off

setenforce 0

sed -i '7 s/enforcing/disabled/'/etc/selinux/config

mkdir -p /media/cdrom/

mount /dev/sr0 /media/cdrom/

cd /etc/yum.r*/

mkdir yun/

mv C* yun/

cp yun/*M* ./

sed -i '20 s/0/1/' C*

yum -y install all

cd

yum makecache

[root@yunduo ~]# rpm -qa |grep bind

samba-winbind-clients-3.6.9-164.el6.x86_64     bind-utils-9.8.2-0.17.rc1.el6_4.6.x86_64

samba-winbind-3.6.9-164.el6.x86_64           PackageKit-device-rebind-0.5.8-21.el6.x86_64

rpcbind-0.2.0-11.el6.x86_64                   bind-libs-9.8.2-0.17.rc1.el6_4.6.x86_64

ypbind-1.20.4-30.el6.x86_64

[root@yunduo ~]# umount /dev/sr0

[root@yunduo ~]# mount /dev/sr0/media/cdrom/

mount: block device /dev/sr0 iswrite-protected, mounting read-only

[root@yunduo ~]# yum -y install bindbind-chroot

Loaded plugins: fastestmirror,refresh-packagekit, security

Loading mirror speeds from cached hostfile......

Installing:32:bind-9.8.2-0.17.rc1.el6_4.6.x86_64              1/2                                                            

Installing:32:bind-chroot-9.8.2-0.17.rc1.el6_4.6.x86_64        2/2                                                             

Verifying:32:bind-9.8.2-0.17.rc1.el6_4.6.x86_64              1/2                                                                

Verifying:32:bind-chroot-9.8.2-0.17.rc1.el6_4.6.x86_64        2/2                                                              

Installed: bind.x86_6432:9.8.2-0.17.rc1.el6_4.6  bind-chroot.x86_64 32:9.8.2-0.17.rc1.el6_4.6                        

Complete!

[root@yunduo ~]# rpm -qa |grep -w bind

bind-utils-9.8.2-0.17.rc1.el6_4.6.x86_64

bind-libs-9.8.2-0.17.rc1.el6_4.6.x86_64

bind-9.8.2-0.17.rc1.el6_4.6.x86_64

bind-chroot-9.8.2-0.17.rc1.el6_4.6.x86_64

[root@yunduo ~]# cd /etc/

[root@yunduo etc]# vim named.conf

[root@yunduo etc]# mv named.conf named.conf.bak

[root@yunduo etc]# vim named.conf

options {                                 （全局配置）

       directory "/var/named";

};

zone benet.com IN {                         （建立正向解析域--本地域）

       type master;

       file "benet.com.zone";

};

zone 16.168.192.in-addr.arpa IN {                     （建立反向解析域）

       type master;

       file "192.168.16.arpa";

};

[root@yunduo etc]# cd /var/named

[root@yunduo named]# vim benet.com.zone            （建立正向区域文件）

$TTL   1D

@  IN  SOA  benet.com. root.benet.com. (

                        2017121501

                        3H

                        15M

                        1W

                        1D )

@      IN      NS      ns1.benet.com.

ns1    IN      A       192.168.16.80

www    IN      A       192.168.16.88

[root@yunduo named]# vim 192.168.16.arpa               （建立反向区域文件）

$TTL   1D

@ IN   SOA     benet.com.      root.benet.com. (

                        2017121501

                        3H

                        15M

                        1W

                       1D )

@      IN      NS      ns1.benet.com.

80     IN      PTR     ns1.benet.com.

88     IN      PTR     www.benet.com.

                                                      （DNS服务器测试）

[root@yunduo named]# named-checkconf/etc/named.conf  

[root@yunduo named]# named-checkzone16.168.192.in-addr.arpa 192.168.16.arpa

zone 16.168.192.in-addr.arpa/IN: loadedserial 2017121501

OK

[root@yunduo named]# service namedrestart                 （启动从域名服务器）

停止 named：                                             [确定]

Generating /etc/rndc.key:                                      [确定]

启动 named：                                              [确定]                                                  

[root@yunduo named]# vim /etc/solv.conf

nameserver 192.168.16.80

nameserver 192.168.16.88

[root@yunduo named]# nslookup                            （DNS服务器测试）

> www.benet.com

Server:              127.0.0.1

Address:   127.0.0.1#53

Name:      www.benet.com

Address: 192.168.16.88

> ns1.benet.com

Server:              127.0.0.1

Address:   127.0.0.1#53

Name:      ns1.benet.com

Address: 192.168.16.80

> 192.168.16.88 

Server:              127.0.0.1

Address:   127.0.0.1#53

88.16.168.192.in-addr.arpa     name = www.benet.com.

> exit

You have mail in /var/spool/mail/root